Review license of all 3rd party code (embedded or not)

[pombredanne]

This is for instance to be researched:
https://github.com/nexB/vulnerablecode/blob/4c42ba870a64adfd14f3cb0c38fa225a9c878ab7/vulnerablecode/static/api_doc/cf2d816ec177c47e23d0.worker.js.LICENSE.txt

[DennisClark]

The attached scan results for Release 36.0.0 might help with this. Note that 97 files in this library

vulnerablecode-36.0.0/etc/thirdparty/virtualenv.pyz-extract/virtualenv/seed/wheels/embed/pip-22.2.2-py3-none-any.whl-extract/pip/_vendor/chardet/

were detected to be licensed under lgpl-2.1-plus which is not a problem if it is being used unmodified. There are also a small number of "unknown-*" licenses reported.

vulnerablecode-36.0.0.tar.gz_scan.zip